Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xr8hMLqcvh6VbbAarc2Pr_qf7ec.roa
File: Xr8hMLqcvh6VbbAarc2Pr_qf7ec.roa (raw, json)
Hash identifier: 4SFDNKdFGppZf9uOlIJB4+kDhtirDG43Cp5R42zhcnM=
Subject key identifier: 5E:BF:21:30:BA:9C:BE:1E:95:6D:B0:1A:AD:CD:8F:AF:FA:9F:ED:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 767A909B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xr8hMLqcvh6VbbAarc2Pr_qf7ec.roa
Signing time: Mon 28 Mar 2022 17:10:24 +0000
ROA not before: Mon 28 Mar 2022 17:10:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1987743899 (0x767a909b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 17:10:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ebf2130ba9cbe1e956db01aadcd8faffa9fede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:46:4e:30:be:93:3e:05:00:c5:35:c8:ea:
9c:33:a4:60:1d:b3:e1:51:b0:a0:00:13:5a:27:c3:
bd:1e:81:10:5f:72:05:19:67:64:68:a0:97:1b:56:
08:3b:3c:f7:b0:96:15:3f:5b:3a:39:13:eb:19:9c:
98:e9:cb:10:1d:7a:6a:05:04:95:53:13:e7:7b:1e:
b8:24:32:e1:dc:9e:f9:58:fb:d6:c8:a4:f9:bf:d9:
51:a2:94:1b:e4:27:a6:9c:aa:50:91:fc:f7:ca:65:
78:96:e6:89:bf:e4:89:10:07:14:6a:7a:40:91:88:
98:08:ca:63:5c:2e:dc:5d:5e:be:74:84:e6:80:ed:
47:f2:8f:06:8d:e5:18:4f:36:91:28:1b:3c:fb:91:
62:47:f4:fb:3f:c9:c3:aa:2a:45:39:b3:cf:a7:84:
1b:e8:d9:ce:fa:9f:02:b3:ee:eb:5f:92:7b:05:00:
af:05:e5:a4:ff:3b:25:d3:78:91:fa:b3:46:b8:b3:
63:09:d2:fe:6f:fe:76:33:c0:6b:d3:39:db:19:a0:
22:67:8f:a2:1a:27:63:20:f4:91:1f:8c:2e:b9:19:
01:03:6e:70:4c:f9:f4:37:73:6d:b5:5f:45:00:f4:
18:3e:19:08:f9:96:50:31:0a:e2:74:52:01:4c:2c:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:21:30:BA:9C:BE:1E:95:6D:B0:1A:AD:CD:8F:AF:FA:9F:ED:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Xr8hMLqcvh6VbbAarc2Pr_qf7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:c3:b2:24:81:0d:b9:44:a5:12:77:fd:a3:51:e6:71:c9:f3:
a7:19:7f:86:7d:be:db:d2:57:70:92:65:39:2e:92:94:f8:bd:
f3:6d:e8:c0:1d:cd:9a:11:5c:26:7d:98:0c:21:1f:1f:98:91:
d1:6a:f2:d7:e7:f0:f0:84:72:d2:66:d2:6d:0d:9d:d8:a0:ea:
09:5c:55:4e:51:e1:7a:e5:d5:76:a2:78:2c:69:58:86:f4:a5:
6b:f1:b4:f9:7d:4f:32:d0:63:f2:b0:85:2c:85:ca:8f:2d:b5:
bb:67:3e:e2:f2:d2:78:a2:f8:c8:2c:af:97:d2:5e:d8:e7:a2:
a6:24:e5:96:a2:6f:84:77:ba:48:ef:80:15:4d:a6:ef:5d:91:
ff:34:3e:e2:3d:c5:80:6e:77:ae:4d:a8:e2:ff:d7:23:05:85:
1f:0c:8f:bc:ce:cc:ae:f7:94:82:5c:8f:e9:b4:86:43:48:0d:
2f:61:bd:c3:94:be:ad:46:f0:64:07:da:c4:46:ad:7f:51:2c:
3b:2f:e8:82:9e:6c:2f:4d:b7:81:c8:d6:6a:16:dc:5a:2f:0a:
b8:9f:fe:2d:6d:7b:24:ac:27:6d:56:a1:4a:48:5f:4d:be:72:
8a:dc:a0:1c:e8:6b:fa:68:b3:3a:01:5d:af:ad:1d:d2:94:a0:
33:52:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:28:57 2025 by rpki-client